Abstract

Security policies can effectively maintain the order of interconnection between domains and secure access. However, with the expansion of network scale and the increasing number of policies, the problem of policy conflict occurs from time to time. In order to achieve efficient detection of conflicts between security policies, this paper proposes a fusion index conflict detection algorithm based on B+-tree and bitmap, which further reduces the scope of policy comparison by dividing the dimensions of policy attributes and constructing a fusion index, so as to effectively improve the detection efficiency. Experiments show that this conflict detection algorithm can shorten the detection time consumption by up to 23% compared with the conflict detection algorithm with a single B+ tree index without losing the detection accuracy.